Your personal data is yours. This Privacy Policy explains exactly what information phataya collects from Filipino players, why we collect it, how we protect it, and the rights you have under the Philippine Data Privacy Act of 2012 (RA 10173).
Our Privacy Commitments
phataya's data practices fully comply with the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations. Our Data Protection Officer oversees all personal data processing activities and handles data subject requests from Filipino players.
All personal data transmitted between your device and phataya's servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by Philippine banks. Data at rest is stored in AES-256 encrypted databases with strict access controls and audit logging.
phataya does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your data is used exclusively for the purposes described in this Privacy Policy — to operate your account, process transactions, and comply with our legal obligations under Philippine law.
Under RA 10173, you have enforceable rights over your personal data — access, correction, erasure, objection, portability, and more. phataya honors all valid data subject requests within the timelines mandated by Philippine law. Submit requests to our Data Protection Officer at any time.
phataya applies data minimization principles — we collect only the personal data necessary for specified, legitimate purposes. We do not collect sensitive personal information beyond what is required for KYC verification and regulatory compliance under PAGCOR and AML frameworks.
In the event of a personal data breach that may affect your rights, phataya will notify affected Filipino players and the National Privacy Commission (NPC) within the timeframes required by RA 10173. We maintain an incident response plan that is reviewed and tested annually.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR"), the data controller responsible for personal data collected through the phataya platform is:
phataya has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the DPA. The DPO is responsible for overseeing phataya's data protection compliance program, handling data subject requests, and serving as the primary point of contact with the National Privacy Commission (NPC).
This Privacy Policy applies to:
This Privacy Policy does not apply to third-party websites linked from phataya's platform, including payment provider portals (GCash, Maya, BPI, BDO, etc.). Those services have their own privacy policies, which you should review independently.
phataya collects the following categories of personal data from Filipino players and other users:
When you create a phataya account, we collect your full legal name, date of birth, Philippine residential address, email address, and mobile phone number. This data is required to create and maintain your account and to comply with age verification requirements under PAGCOR regulations.
To process withdrawals and comply with PAGCOR's KYC requirements and the Philippine Anti-Money Laundering Act (RA 9160, as amended), phataya collects copies of Philippine government-issued identification documents (such as your Philippine Passport, SSS ID, PhilHealth ID, Unified Multi-Purpose ID, or Driver's License), selfie photographs for liveness verification, and proof of address documents where required.
| Data Type | Purpose | Retention |
|---|---|---|
| Payment method details (GCash number, bank account, crypto wallet address) | Processing deposits and withdrawals; AML compliance | 5 years post-account closure |
| Deposit and withdrawal transaction records | Account management; regulatory reporting; dispute resolution | 5 years post-account closure |
| Transaction timestamps and amounts | Fraud detection; AML monitoring; tax compliance | 5 years post-account closure |
phataya records all gaming activity associated with your account, including game sessions played, bet amounts, game outcomes, win/loss history, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory compliance.
When you access phataya, we automatically collect technical data including your IP address, device type and operating system, browser type and version, session timestamps, pages visited and features accessed, and login location data. This information is collected to maintain platform security, detect fraud, and optimize the platform experience for Filipino players.
If you contact phataya's customer support team — by live chat, email, or telephone — we retain records of those communications, including the content of your messages and our responses. This data is used to resolve your inquiry and to improve our customer service quality.
phataya processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act and its IRR:
phataya uses your personal data for the following specific purposes:
phataya does not sell your personal data. We share personal data with third parties only in the following limited circumstances:
phataya uses cookies and similar technologies to maintain platform functionality, enhance security, and analyze usage patterns. The following categories of cookies are used on phataya:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login state, security tokens, CSRF protection | No — required for the platform to function |
| Functional | Remembering your language preference, game settings, and responsible gaming limits | Yes — disabling may affect user experience |
| Analytics | Aggregated platform usage statistics used to improve phataya's services | Yes — data is anonymized before analysis |
| Security | Device fingerprinting for fraud detection and unauthorized login alerts | No — required for account security |
You can manage non-essential cookies through your browser settings. Please note that disabling functional cookies may affect the phataya platform experience, particularly on mobile devices used by Filipino players with custom browser configurations.
phataya retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:
Following the expiration of applicable retention periods, personal data is securely deleted or anonymized in accordance with phataya's data destruction procedures.
phataya implements a layered security framework to protect your personal data against unauthorized access, loss, destruction, or alteration. Our technical and organizational security measures include:
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phataya. To exercise any of these rights, please contact our Data Protection Officer at [email protected].
Request a copy of all personal data phataya holds about you, along with information about how it is processed. phataya will respond within 15 business days of a valid request.
Request correction of inaccurate or incomplete personal data. Many data fields can be updated directly from your phataya account settings; others require DPO verification.
Request deletion of your personal data where retention is no longer legally required. Note: data subject to mandatory retention under Philippine AML law cannot be erased during the applicable retention period.
Object to processing of your personal data for direct marketing, profiling, or other purposes based on legitimate interests where your individual circumstances warrant.
Request a machine-readable copy of personal data you have provided to phataya, where technically feasible and where processing is based on consent or contract.
Withdraw consent for processing activities based on consent (such as marketing communications) at any time. Withdrawal does not affect the lawfulness of prior processing based on that consent.
If you are unsatisfied with phataya's response to a data subject request, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file an NPC complaint is available on the NPC's official website.
During the registration process and KYC verification, phataya verifies the age of all account holders. Any account found to belong to a person under 21 years of age will be immediately suspended, the account balance (net of any bonuses) will be returned to the deposit source, and the personal data will be deleted except to the extent necessary to prevent re-registration.
If you are a parent or guardian and believe that a person under 21 years of age has registered for a phataya account using your or their details, please contact our Data Protection Officer immediately at [email protected]. We will investigate and take appropriate action within 48 hours of notification.
In the course of providing services to Filipino players, phataya may transfer certain personal data to third-party processors located outside the Philippines — for example, game providers or fraud prevention services that operate server infrastructure in other jurisdictions.
phataya ensures that all cross-border transfers of personal data comply with the requirements of Section 21 of the DPA and NPC Circular 16-01. Specifically, phataya ensures that:
Where a cross-border transfer is required for the performance of your contract with phataya (for example, to process a game session with an international studio provider), phataya will ensure the transfer is covered by appropriate safeguards before your data is sent.
phataya may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The effective date of the current version is displayed at the top of this document.
When material changes are made to this Privacy Policy, phataya will notify registered players via email to their registered email address and/or via a prominent in-platform notification at least seven (7) days before the changes take effect, unless a shorter notice period is required by law.
Your continued use of the phataya platform following the effective date of a revised Privacy Policy constitutes your acceptance of the revised practices. If you do not accept the revised Privacy Policy, you must cease using phataya and may request account closure by contacting our Data Protection Officer.
For all data privacy matters — including data subject requests, consent withdrawal, privacy complaints, or general questions about how phataya processes your personal data — please contact our Data Protection Officer:
phataya is committed to resolving all data privacy concerns promptly and transparently. If you are not satisfied with our response, you may escalate to the National Privacy Commission of the Philippines. Information on how to file a complaint is publicly available through the NPC's official channels.
Your personal data is safe with phataya — encrypted, minimized, never sold, and fully compliant with Philippine law. Over 2 million Filipino players trust phataya for their online gaming. GCash deposits, 500+ games, live PBA betting, 24/7 support in Tagalog and English.
⚠️ phataya is strictly for players aged 21 and above. Gambling involves financial risk. Please play responsibly.